booking-notify
Warn
Audited by Socket on Apr 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The overall purpose is coherent for booking notifications, and Telegram/Pushover credentials are mostly proportionate. However, the skill’s real execution path depends on an external local calcom-commander codebase and an optional custom Cloud Run relay, creating moderate supply-chain and data-flow risk that is not fully explained within this skill.
Confidence: 86%Severity: 61%
Audit Metadata